Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/5_Mzkp4AJ0QwGWnN3VvEdaOfRtY.roa
File: 5_Mzkp4AJ0QwGWnN3VvEdaOfRtY.roa (raw, json)
Hash identifier: KPRBRfXnJeYECt7rkwbA5HLNQN041J0Mdk2L9JLyBZo=
Subject key identifier: E7:F3:33:92:9E:00:27:44:30:19:69:CD:DD:5B:C4:75:A3:9F:46:D6
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01941F8C6B32790DAA0256F489D1DE90FCDB
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/5_Mzkp4AJ0QwGWnN3VvEdaOfRtY.roa
Signing time: Wed 01 Jan 2025 01:48:03 +0000
ROA not before: Wed 01 Jan 2025 01:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52207
IP address blocks: 2a02:2698:7c00::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6b:32:79:0d:aa:02:56:f4:89:d1:de:90:fc:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7f333929e002744301969cddd5bc475a39f46d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:33:5e:26:d3:de:f8:36:2d:fb:81:51:9b:f6:
1e:18:db:11:13:45:a6:86:56:4e:da:85:6a:4b:cf:
d2:b1:13:86:6a:cd:ad:3c:88:fa:b3:43:53:16:a3:
4c:96:8d:73:1b:85:9e:30:2f:2a:db:cd:3c:c9:68:
a2:59:c9:26:a4:51:23:4f:69:43:99:58:d7:55:18:
cd:fe:53:4b:88:c7:d4:8f:19:a0:bd:7e:7e:fb:1e:
57:39:8e:16:77:c3:2d:b9:b7:29:bf:40:8f:bb:7e:
a5:69:67:17:df:61:1a:db:9f:d4:8e:c6:ba:05:24:
23:56:51:f4:35:78:0c:ea:88:cb:f0:75:1d:b8:e2:
f8:a6:fe:4c:79:23:86:0c:14:a1:86:d7:15:2f:b8:
57:9e:fd:cf:c8:d3:79:05:78:03:c1:48:5c:15:13:
1e:f5:31:b6:49:4e:3c:86:ae:32:59:63:90:f6:c9:
92:0a:ad:2c:5a:fc:0d:53:66:9c:5e:69:b8:04:8b:
0c:77:69:72:a1:91:11:3e:7c:05:4c:ce:e6:4e:2c:
a2:14:ba:58:80:24:1c:fb:84:a7:84:2f:5b:c8:b9:
88:42:07:cf:1a:3c:a9:57:7f:0f:92:3f:ec:b0:b4:
34:c7:08:f3:a7:d9:b9:e9:e5:8e:8b:61:db:17:d3:
da:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F3:33:92:9E:00:27:44:30:19:69:CD:DD:5B:C4:75:A3:9F:46:D6
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/5_Mzkp4AJ0QwGWnN3VvEdaOfRtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:7c00::/38
Signature Algorithm: sha256WithRSAEncryption
76:cc:8d:df:0a:ac:84:07:4c:32:9f:b7:de:15:69:03:b9:75:
e9:67:99:b7:7b:57:01:58:40:fb:ad:9a:77:20:c0:b6:81:15:
df:e0:fb:38:3d:6f:f8:fd:84:42:a7:b3:e6:57:0b:f1:b4:b8:
6e:6d:ff:47:80:ea:b9:f3:69:63:c0:a9:9f:ce:f0:0c:98:cd:
e7:c7:4b:a2:13:a2:05:03:ba:18:cd:9c:43:d1:e4:97:35:f7:
58:67:36:64:8f:be:54:07:8b:bb:0f:24:63:a5:05:b4:47:78:
43:ca:71:db:24:a2:d3:45:b2:2d:6b:9f:65:6d:da:ea:c8:b5:
63:31:7a:07:21:94:19:5b:b0:b0:7d:1b:aa:fd:09:1e:d7:76:
47:be:ca:6d:72:99:93:ef:a4:cd:ab:e8:b9:0e:b0:18:c9:34:
00:f8:1f:9c:c6:18:2b:03:83:04:f8:0f:19:75:86:29:0c:a2:
01:30:2d:f7:fc:c5:12:11:97:a8:2d:bb:06:ff:ea:fd:4f:48:
67:39:7b:c6:35:62:91:6b:30:b5:be:92:1e:25:0e:66:c1:44:
28:07:1c:9b:79:00:ed:b0:f4:69:07:4f:0f:be:4a:ae:db:02:
08:f6:a2:58:19:e2:fa:51:92:85:b8:1c:70:60:81:7e:65:8f:
81:7e:7f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:47 2025 by rpki-client